CVE-2026-107425

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

CVE-2026-107417

Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push Notification for Post and BuddyPress: from n/a through...

CVE-2026-107426

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12...

CVE-2026-107426

The WordPress Paid Videochat Turnkey Site plugin (ppv-live-webcams) is affected by a Broken Access Control vulnerability (CWE-862) in versions up to and including 7.5.12 . This Missing Authorization issue stems from incorrectly configured access control security levels , which could allow unautho...

CVE-2026-107417

The Push Notification for Post and BuddyPress WordPress plugin (versions

CVE-2026-107425

The Bus Ticket Booking with Seat Reservation plugin by Magepeople inc. (versions up to 5.9.7 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization (CWE-862) vulnerability, specifically allowing the exploitation of incorrectly configured access control securit...

CVE-2026-107433

The WP OAuth Server plugin by miniOrange (versions up to and including 6.4.0 ) is vulnerable to a Broken Access Control issue (CWE-862). The root cause is Missing Authorization , which allows for the exploitation of Incorrectly Configured Access Control Security Levels . This vulnerability has a ...

CVE-2026-109898

The WP Event Solution plugin for WordPress (versions up to and including 4.1.25 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization flaw (CWE-862), which allows for the exploitation of incorrectly configured access control security levels . This vulnerabili...

CVE-2026-109896

The Download Monitor integration for WooCommerce plugin (versions n/a through 1.0.3 ) contains a Broken Access Control vulnerability due to Missing Authorization . Specifically, the flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact is categorized as Med...

CVE-2026-109890

The Premium Addons for Elementor WordPress plugin (versions up to and including 4.11.110 ) is vulnerable to a Broken Access Control issue (CWE-862). The root cause is Missing Authorization , which allows for exploiting incorrectly configured access control security levels. This vulnerability carr...

CVE-2026-109699

The ThemeGrill User Registration WordPress plugin (versions

CVE-2026-108174

The PluginUs.Net FOX woocommerce-currency-switcher WordPress plugin, versions up to and including 1.5.4 , is vulnerable to a Missing Authorization (CWE-862) issue. The vulnerability stems from Incorrectly Configured Access Control Security Levels , potentially allowing unauthorized actions. The i...

CVE-2026-106597

The ThemeGrill User Registration plugin for WordPress (versions up to and including 5.2.8 ) contains a Broken Access Control vulnerability. The root cause is Missing Authorization resulting from incorrectly configured access control security levels. This vulnerability allows for the exploitation ...

CVE-2026-109696

The FluentBoards plugin for WordPress (developed by WP ManageNinja LLC) is vulnerable to a Broken Access Control issue (CWE-862) in versions up to and including 2.1.0 . The root cause is incorrectly configured access control security levels , which allows for missing authorization . This vulnerab...

CVE-2026-108492

The Quick Paypal Payments plugin for WordPress (versions n/a through 6.0.3 ) is vulnerable to a Broken Access Control issue (CWE-862). The vulnerability stems from Missing Authorization , specifically allowing for the exploitation of incorrectly configured access control security levels within th...

CVE-2026-108477

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...

CVE-2026-108476

Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...

CVE-2026-108475

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...

CVE-2026-108486 WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0...

EUVD-2026-97721

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...